Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/F1x1bnRxvxU_cHszyU8VZnauQFM.roa
File: F1x1bnRxvxU_cHszyU8VZnauQFM.roa (raw, json)
Hash identifier: /k+3KEVt2dlTLAtRSYyYQtNkrGNyeVCY870qUlLUNg0=
Subject key identifier: 17:5C:75:6E:74:71:BF:15:3F:70:7B:33:C9:4F:15:66:76:AE:40:53
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01856F022B1DA951D8E8DDE480EC2794FB2E
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/F1x1bnRxvxU_cHszyU8VZnauQFM.roa
Signing time: Sun 01 Jan 2023 20:24:51 +0000
ROA not before: Sun 01 Jan 2023 20:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 84.247.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:2b:1d:a9:51:d8:e8:dd:e4:80:ec:27:94:fb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 20:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=175c756e7471bf153f707b33c94f156676ae4053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:d2:3a:28:62:47:c7:5c:ad:8f:20:1d:d4:
f9:ac:fd:87:00:65:d7:3d:6f:7e:21:85:1f:de:12:
9e:c8:21:f7:e9:2f:3a:a0:3a:75:bf:fb:36:d4:b3:
a6:92:96:9e:44:03:66:06:07:b7:07:e4:45:63:47:
eb:48:7f:02:4d:6a:c2:be:ad:d8:0a:ed:c0:d4:95:
f5:91:e0:f1:a9:64:7c:ee:b1:c5:4e:1d:53:76:a2:
51:63:d3:c5:aa:5f:1a:eb:47:3b:85:22:62:ee:b8:
4b:22:8c:2d:10:2f:62:8a:37:bd:3c:9e:61:39:4d:
29:8d:48:39:f3:db:f2:2a:3e:7b:e0:43:d7:ab:78:
38:5b:b9:c9:51:5e:d8:1a:49:c5:a1:1e:84:85:4c:
49:88:9b:ca:64:33:55:5c:08:f7:a2:e2:7c:0a:74:
82:ff:73:cd:09:31:db:bf:d3:6d:64:58:f9:71:95:
87:1e:df:62:0a:a0:b3:16:cf:ee:fd:35:06:d0:8a:
00:ca:73:71:ac:d5:d7:96:d1:d8:5d:ce:96:1b:34:
3c:06:fd:6d:b6:ac:03:10:01:a0:79:9a:e4:15:73:
86:a2:8f:d4:53:3a:d7:f7:b0:3a:ae:5e:c3:39:46:
76:66:1a:01:50:b9:59:24:41:1d:ec:a9:35:d9:91:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5C:75:6E:74:71:BF:15:3F:70:7B:33:C9:4F:15:66:76:AE:40:53
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/F1x1bnRxvxU_cHszyU8VZnauQFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.59.0/24
Signature Algorithm: sha256WithRSAEncryption
96:65:fe:28:11:c5:44:f4:99:29:23:c6:15:b0:ac:23:3c:2a:
d4:b5:aa:b5:66:e3:68:ad:07:b4:8d:9e:17:ff:32:e6:92:52:
eb:3b:2f:8b:f7:33:67:c6:92:9b:38:b6:69:e6:88:b7:40:a0:
7e:f4:a9:12:74:58:f7:90:3d:98:92:36:cf:76:88:e8:8e:09:
cb:59:1c:8b:69:0d:a0:a6:ad:ef:37:f3:a4:ca:d8:08:a7:7d:
b9:85:f9:d1:71:68:c9:ef:d9:e1:ea:a9:c7:4e:e9:4a:c9:db:
6c:1e:75:aa:82:5c:fa:2a:c2:5c:45:33:3f:bb:6b:1d:9f:d8:
1b:b9:22:86:29:8a:b9:eb:8d:19:41:68:42:fc:7a:f2:b9:54:
82:42:69:bd:7a:a8:e1:17:4f:84:50:1b:68:19:40:5b:ce:6d:
22:84:be:4f:2b:42:1f:84:f5:a3:40:67:29:87:d7:00:d8:07:
9b:41:b6:5b:7a:17:39:78:f7:f6:67:24:82:24:11:d2:37:2e:
a6:1c:29:2a:ee:0c:e7:db:65:0b:2e:95:31:37:9d:fc:11:d6:
5f:a0:4c:62:d2:a2:be:8b:04:0a:ca:eb:86:ba:44:b3:8a:8f:
92:de:d5:06:4b:fc:6f:1f:ea:14:55:d5:31:f4:3b:31:6d:2c:
25:f3:31:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:45 2024 by rpki-client on console-fra.rpki-client.org